I think there's a reasonable argument that modern cars are so full of cameras and other surveillance gear that there should be some rules about where this data is sent and how it's handled.

Unfortunately, this doesn't seem to be that.

It could be that US would benefit from having a more generic GDPR law rather than individual enforcement.